Transformation Services Agreement - NSW Department of Education ...

22. Privacy
(a)
(b)
(c)
(d)
(e)
The Contractor must comply with the obligations set out in Schedule 12 and any
Laws relating to privacy.
The Contractor must immediately notify DEC when the Contractor becomes aware
of or receives a complaint relating to a breach of this clause 22 by the Contractor or
its Personnel.
[Omitted.]
[Omitted.]
This clause 22 will survive the termination or expiry of this agreement for a period
of six years.
23. Information security
23.1 No unauthorised access
The Contractor will, to the extent the System and NSW Government Property are within its
possession or control, take all reasonable steps to ensure that no unauthorised party:
(a)
(b)
is allowed physical or electronic access to the System or NSW Government
Property; and
prevents the Solution from being available.
This includes installing and maintaining adequate security features within the System.
23.2 Safeguarding DEC Data
(a)
The Contractor will establish and maintain environmental, safety and facility
procedures, data security procedures and other safeguards against the destruction,
loss, unauthorised access or alteration of DEC Data in the possession of Contractor
which are:
(i)
(ii)
(iii)
no less rigorous than those maintained by the Contractor for its own
information of a similar nature;
no less rigorous than accepted security standards in the industry,
including those set forth in the Specifications; and
adequate to meet the requirements of the DEC Policies.
(b)
(c)
(d)
Within 6 months following the Effective Date and as subsequently requested by
DEC but no more frequently than once each year, the Contractor will evaluate the
then-current DEC security policy and will prepare and submit for DEC review and
approval recommendations with respect to changes or modifications to such policy.
The Contractor may charge Time and Materials for work performed under this
clause in excess of the first 4 days of work.
The Contractor will maintain and enforce the then-current DEC security policy until
any changes or modifications are approved by DEC for implementation.
The Contractor will adhere to DEC Data policies and testing requirements in the
Specifications.
Legal\305532610.12 Commercial-in-confidence 27